PHP script to include webpages with in a page

[mikemxc]

Im sorry to ask im sure such a silly question. But, I can't for the life of me find the simple script to include a page with in one php page.

 

where you would use te url like http://anypage.com/index.php?id=signup

 

then the script would just include signup.php within index.php.

 

 

help please..

 

thanks

[Mchl]

Most basic form

 

include($_GET['id'].".php");

 

careful, as this can potentially lead to XSS attacks.

[mikemxc]

Thank you for the reply, i do understand it can be a risk. Is there anything anyone can suggest or would it just be safer not doing this?

[Mchl]

for example you can create a list of allowed pages

 

$whitelist = array("signup","about","products"); //only allow pages from this list
if(in_array($_GET['id'],$whitelist)) {  //check if page to be included is in the list
  include($_GET['id'].".php"); 
} else {
  die("No such page!");
}